今すぐJN0-334問題を使おうJN0-334問題集PDF
問題集練習試験問題学習ガイドはJN0-334試験合格させます
質問 40
What are two types of attack objects used by IPS on SRX Series devices? (Choose two.)
- A. protocol anomaly-based attacks
- B. signature-based attacks
- C. DDoS-based attacks
- D. spam-based attacks
正解: A,B
解説:
Explanation
https://www.oreilly.com/library/view/juniper-srx-series/9781449339029/ch13.html
質問 41
Which two statements describe JSA? (Choose two.)
- A. JSA supports events and flows from Junos devices, including third-party devices.
- B. Security Director must be used to view third-party events from JSA flow collectors
- C. JSA events must be manually imported into Security Director using an SSH connection
- D. JSA can be used as a log node with Security Director or as a standalone solution
正解: C,D
質問 42
A routing change occurs on an SRX Series device that involves choosing a new egress interface.
In this scenario, which statement is true for all affected current sessions?
- A. The current sessions are torn down and go through first path processing based on the new route.
- B. The current session are torn dowm only if the policy-rematch option has been enabled.
- C. The current sessions do not change.
- D. The current sessions might change based on the corresponding security policy.
正解: A
質問 43
You are deploying the Junos application firewall feature in your network.
In this scenario, which two elements are mapped to applications in the application system cache? (Choose two.)
- A. source port
- B. destination IP address
- C. destination port
- D. source IP address
正解: B,C
質問 44
Click the Exhibit button.
Referring to the exhibit, which action will be taken for traffic coming from the untrust zone going to the trust zone?
- A. Source address 10.1.1.5 will be translated to 2001:db8::8.
- B. Source address 2001:db8::8 will be translated to 10.1.1.5.
- C. Source address 10.1.1.8 will be translated to 2001:db8::8.
- D. Source address 2001:db8::8 will be translated to 10.1.1.8.
正解: D
質問 45
Click the Exhibit button.
You are monitoring traffic, on your SRX300 that was configured using the factory default security parameters. You notice that the SRX300 is not blocking traffic between Host A and Host B as expected.
Referring to the exhibit, what is causing this issue?
- A. You have not created address book entries for Host A and Host B.
- B. The default policy has not been committed.
- C. Host B was not assigned to the Untrust zone.
- D. The default policy permits intrazone traffic within the Trust zone.
正解: D
質問 46
You want to support reth LAG interfaces on a chassis cluster.
What must be enabled on the interconnecting switch to accomplish this task?
- A. swfab
- B. 802.3ad
- C. RSTP
- D. LLDP
正解: B
解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/junos/topics/topic-map/security-chassis-cluster- redundant-ethernet-lag-interfaces.html
質問 47
What are two types of collectors for the JATP core engine? (Choose two.)
- A. telemetry
- B. SNMP
- C. e-mail
- D. Web
正解: C,D
質問 48
When working with network events on a Juniper Secure Analytics device, flow records come from which source?
- A. tap port
- B. mirror
- C. SPAN
- D. switch
正解: C
解説:
Explanation/Reference: https://www.juniper.net/documentation/en_US/jsa7.3.1/jsa-arch-deployment-guide/topics/concept/ jsa-ad-jsa-events-and-flows.html
質問 49
You must block the lateral spread of Remote Administration Tools (RATs) that use SMB to propagate within the network, using the JATP solution.
Which action would accomplish this task?
- A. Configure whitelist rules
- B. Configure YARA rules.
- C. Configure the SAML settings.
- D. Configure a new anti-virus configuration rule.
正解: B
解説:
Explanation/Reference:
質問 50
Click the Exhibit button.
You have configured NAT on your network so that Host A can communicate with Server B.
You want to ensure that Host C can initiate communication with Host A using Host A's reflexive address.
Referring to the exhibit, which parameter should you configure on the SRX Series device to satisfy this requirement?
- A. Configure persistent NAT with the any-remote-hostparameter.
- B. Configure persistent NAT with the target-hostparameter.
- C. Configure persistent NAT with the port-overloadingparameter.
- D. Configure persistent NAT with the target-host-portparameter.
正解: B
質問 51
Click the Exhibit button.
The output shown in the exhibit is displayed in which format?
- A. WELF
- B. syslog
- C. binary
- D. sd-syslog
正解: D
質問 52
In an Active/Active chassis cluster deployment which chassis cluster component is responsible for RGO traffic?
- A. the master routing engine of the secondary node
- B. the primary node
- C. the backup routing engine of the primary node
- D. the secondary node
正解: B
質問 53
Which statement about the control link in a chassis cluster is correct?
- A. A cluster can have redundant control links.
- B. The control link heartbeats contain the configuration file of the nodes.
- C. Recovering from a control link failure requires a reboot.
- D. The control messages sent over the link are encrypted by default.
正解: A
質問 54
Which feature supports sandboxing of zero-day attacks'?
- A. Sky ATP
- B. high availability
- C. ALGs
- D. SSL proxy
正解: D
質問 55
How many nodes are configurable in a chassis cluster using SRX Series devices?
- A. 0
- B. 1
- C. 2
- D. 3
正解: D
解説:
Explanation
質問 56
What is the default timeout period for a TCP session in the session table of a Junos security device?
- A. minute '
- B. 60 minutes
- C. 30 minutes
- D. 15 minutes
正解: C
質問 57
Click the Exhibit button.
You have an IPsec tunnel between two devices. You clear the IKE security associations, but traffic continues to flow across the tunnel.
Referring to the exhibit, which statement is correct in this scenario?
- A. The IKE security association immediately reestablishes
- B. The IPsec security association is independent from the IKE security association
- C. The traffic is using an alternate path
- D. The traffic is no longer encrypted
正解: B,D
質問 58
The DNS ALG performs which three functions? (Choose three )
- A. The DNS ALG performs DNSSEC
- B. The DNS ALG performs the IPv4 and IPv6 address transformations
- C. The DNS ALG modifies the DNS payload in NAT mode
- D. The DNS ALG performs DNS load balancing
- E. The DNS ALG performs DNS doctoring.
正解: B,D,E
質問 59
Click the Exhibit button.
Which two statements describe the output shown in the exhibit? (Choose two.)
- A. Redundancy group 1 experienced an operational failure.
- B. Node 0 is passing traffic for redundancy group 1.
- C. Node 1 is passing traffic for redundancy group1.
- D. Redundancy group 1 was administratively failed over.
正解: C,D
質問 60
Data plane logging operates in which two modes? (Choose two.)
- A. syslog
- B. stream
- C. binary
- D. event
正解: B,D
質問 61
......
Juniper JN0-334 認定試験の出題範囲：
| トピック | 出題範囲 |
|---|---|
| トピック 1 |
|
| トピック 2 |
|
| トピック 3 |
|
| トピック 4 |
|
| トピック 5 |
|
| トピック 6 |
|
無料JNCIS-SEC JN0-334試験問題：https://jp.fast2test.com/JN0-334-premium-file.html